127 matches found
Null pointer dereference
In all Android releases from CAF using the Linux kernel, a QTEE system call fails to validate a pointer...
CVE-2015-9025
In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE application...
CVE-2015-9032
In all Android releases from CAF using the Linux kernel, a DRM key was exposed to QTEE applications...
CVE-2015-9033
In all Android releases from CAF using the Linux kernel, a QTEE system call fails to validate a pointer...
CVE-2015-9024
In all Android releases from CAF using the Linux kernel, some interfaces were improperly exposed to QTEE applications...
Buffer overflow
In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE application...
CVE-2015-9024
In all Android releases from CAF using the Linux kernel, some interfaces were improperly exposed to QTEE applications...
CVE-2015-9032
In all Android releases from CAF using the Linux kernel, a DRM key was exposed to QTEE applications...
CVE-2015-9033
In all Android releases from CAF using the Linux kernel, a QTEE system call fails to validate a pointer...
CVE-2015-9024
CVE-2015-9024 concerns Android CAF builds: in all CAF Android releases that use the Linux kernel, certain interfaces were improperly exposed to QTEE applications. The connected documents do not provide a specific affected product/version beyond this CAF/Linux-kernel context, nor do they describe ...
CVE-2015-9025
CVE-2015-9025 describes a buffer overflow in the QTEE application used in CAF Android builds (Linux kernel). The underlying issue is a buffer overflow in QTEE, enabling potential arbitrary code execution on affected devices. Public references confirm the Android QTEE vulnerability and describe it...
CVE-2015-9032
CVE-2015-9032: In CAF Android releases using the Linux kernel, a DRM key was exposed to QTEE applications, enabling information disclosure of DRM secrets. The description does not provide remediation details or explicit root-cause fixes in the supplied documents.
CVE-2015-9033
CVE-2015-9033 is an Android CAF/Linux kernel issue where a QTEE system call fails to validate a pointer. Reported as a local vulnerability with high impact (confidentiality, integrity, availability) and requiring user interaction. Public references describe the root cause as pointer validation fa...
CVE-2017-8242
In all Android releases from CAF using the Linux kernel, a race condition exists in a QTEE driver potentially leading to an arbitrary memory write...
PT-2017-2248
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is caused by a buffer overflow in a QTEE application. This can be exploited by a remote attacker to cause a denial of service. The estimated number of potentially affected devices...
PT-2017-2300
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue is related to a QTEE system call that fails to validate a pointer in the Android operating system. This could potentially allow a remote attacker to bypass certificate verification...
PT-2017-7528
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description The issue affects Android releases from CAF using the Linux kernel, where some interfaces were improperly exposed to QTEE applications. Recommendations At the moment, there is no information...
PT-2017-7530
Name of the Vulnerable Software and Affected Versions Android affected versions not specified Description A DRM key was exposed to QTEE applications in all Android releases from CAF using the Linux kernel. Recommendations At the moment, there is no information about a newer version that contains ...
CVE-2015-9032: Exposure of Sensitive Information to an Unauthorized Actor
In all Android releases from CAF using the Linux kernel, a DRM key was exposed to QTEE applications...